CVE-2026-97337

Published 3 October 2026 · tracked since 3 October 2026

Description

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from SwpmInitTimeTasks::check_and_do_email

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-94505 HIGH 8.1
• CVE-2026-96267 HIGH 7.5
• CVE-2026-75028 HIGH 7.5
• CVE-2026-87115 CRITICAL 9.1
• CVE-2026-93889 HIGH 7.2
• CVE-2026-18443 HIGH 8.8
• CVE-2026-100157 MEDIUM 6.5
• CVE-2026-97341 HIGH 7.2
• CVE-2026-96650 HIGH 7.2
• CVE-2026-96564 HIGH 7.2

→ Open the live CVE board · all tools